Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in the Zoom Client SDK for Windows prior to version 5.15.0, which arises from the explicit storage of sensitive information and allows authenticated users to enab...

Zoom Rooms Code Issue Vulnerability

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability previously existed in Zoom Rooms for Windows version 5.15.5, which stemmed from an untrusted sear...

Zoom Client Data Forgery Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.5, which stemmed from an insufficient data authenticity validation issue...

Zoom Client Code Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.5, which stemmed from an untrusted search path issue in the installer...

PT-2023-4646 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.14.10 Description: The issue is related to the client-side enforcement of server-side security in Zoom clients, which may allow an authenticated user to enable information disclosure via network access. This could...

Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in the Zoom Client SDK prior to version 5.14.10 that stems from an improper input validation issue...

Zoom Rooms Security Breach

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability previously existed in Zoom Desktop Client for Windows and Zoom Rooms for Windows version 5.15.5,...

Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Client version 5.14.10, which stemmed from a client-side implementation issue with server-side security...

PT-2023-4693 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.14.7 Description: The issue is related to uncontrolled resource consumption, which may allow an unauthenticated user to cause a denial of service via network access. This can be exploited by a remote attacker to disru...

PT-2023-4962 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.7 Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to gain elevated privileges. This can potentially allow an unauthenticate...

Zoom Client Path Traversal Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.14.7, which stemmed from a path traversal issue...

PT-2023-4700 · Zoom · Zoom Desktop Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.2 Zoom VDI Client versions prior to 5.15.2 Description: The issue exists due to improper neutralization of special elements, which may allow an unauthenticated user to enable an escalatio...

Zoom Client Input Validation Error Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows version 5.15.5, which stemmed from an improper input validation issue...

PT-2023-25614 · Zoom · Zoom Client

Name of the Vulnerable Software and Affected Versions: Zoom Clients versions prior to 5.14.5 Description: The issue is related to a buffer overflow that may allow an unauthenticated user to cause a denial of service via network access. Recommendations: For versions prior to 5.14.5, update to...

Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Client version 5.14.10, which stemmed from a client-side implementation issue with server-side security...

PT-2023-4699 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.5 Description: The issue is related to improper input validation, which may allow an authenticated user to enable information disclosure via network access. This could potentially permit ...

PT-2023-4692 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.14.5 Description: The issue is related to an untrusted search path in the installer, which may allow an authenticated user to enable an escalation of privilege via local access. This could...

WordPress Video Conferencing with Zoom Plugin <= 4.2.1 is vulnerable to Sensitive Data Exposure

Software Video Conferencing with Zoom Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-3947 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 55e6071a651c Credits Lana Codes...

CVE-2023-3947

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapiencryptdecrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated attackers to decrypt and view the meetin...

CVE-2023-3947

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapiencryptdecrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated attackers to decrypt and view the meetin...